I checked with our IS people, especially since HIPAA is a major focus for the Hospital currently. Their response:
------------------------------------------------------------------------------------------------------------------------
Others have been concerned as well about Microsoft's "backdoors" into various products... the latest of which are Windows XP, Microsoft Media Player, and Internet Explorer. All three of these software packages do record some demographic and usage data according to Microsoft's own licensing statements. However, they all state that they do not allow Microsoft to view what you are viewing, capture your data, etc etc. If they try to "sneak in" (i.e. remote control or remote view) your machine, they would be violating their own agreements. We do not deploy Windows XP... and we have disabled the data gathering ability of Microsoft Media Player and IE to the best of our knowledge.
------------------------------------------------------------------------------------------------------------------------
We are running Windows 2000 and there are no plans to move to Windows XP. Also, for HIPAA we are documenting all companies with whom we do business and who have access to our systems or records, either for maintenance or installation or some other valid purpose. We will be establishing either Business Associate or Chain-of-Trust Agreements with all, whichever is most appropriate...Bill
Bill Caskey, PhD
Director, Research & Grants Administration
Children's Mercy Hospital
2401 Gillham Road
Kansas City, MO 64108
Ph:(816) 234-3149 (new number)
Fx:(816) 855-1982
E-mail: xxxxxx@cmh.edu <mailto:xxxxxx@cmh.edu>
This communication is intended only for the use of the addressee. It may contain information which is privileged or confidential under applicable law. If you are not the intended recipient or the agent of the recipient, you are hereby notified that any dissemination, copy or disclosure of this communication is strictly prohibited. If you have received this communication in error, please immediately notify The Children's Mercy Hospital at 816-234-3879 or via return Internet electronic mail at xxxxxx@cmh.edu <mailto:xxxxxx@cmh.edu> and expunge this communication without making any copies. Thank you for your cooperation.